2026-11-01_9921852af3d657fc156ede4c16d06a15_elex_glassworm_maze_poet-rat

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_9921852af3d657fc156ede4c16d06a15_elex_glassworm_maze_poet-rat
Size 13.6MB
Sample261102-rc3s2sfc78
SHA256 8d35c5d2d8f0a4beaffb04f430aa2344d62f4bb6d6cc7d92322bb764b93f328d
MD5 9921852af3d657fc156ede4c16d06a15
SHA1 ab652ee2a974c3d28b7304f1a99ccb1e7deaf907
SHA512 a0357e7c599d296d566e593e8f0e2677afd0d29f74add2a40a6b400f58b4e2234c0bc53599ac2ca7fca67df6ea9929b328885a433f26282dc81926b777cb6794
SSDEEP 196608:qSX+eN3rVqtO83mpHhzVr2KpqG1kvqVBdumKJfFsD:qSX+G3+O83mpHhzZ7q6kvqvEBfq
TLSH
T15AE69E42F7825DF1D9C240B065BFB73B8A369928477482E397A51DC9E8392D1363B3C9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_9921852af3d657fc156ede4c16d06a15_elex_glassworm_maze_poet-rat

File Explorer

2026-11-01_9921852af3d657fc156ede4c16d06a15_elex_glassworm_maze_poet-rat

.exe 13.6MB

2026-11-01_9921852af3d657fc156ede4c16d06a15_elex_glassworm_maze_poet-rat

IMPHASH 715de4a575c492057071b5d4ba88f2dc
SHA256 8d35c5d2d8f0a4beaffb04f430aa2344d62f4bb6d6cc7d92322bb764b93f328d
MD5 9921852af3d657fc156ede4c16d06a15
SHA1 ab652ee2a974c3d28b7304f1a99ccb1e7deaf907
SHA512 a0357e7c599d296d566e593e8f0e2677afd0d29f74add2a40a6b400f58b4e2234c0bc53599ac2ca7fca67df6ea9929b328885a433f26282dc81926b777cb6794
SSDEEP 196608:qSX+eN3rVqtO83mpHhzVr2KpqG1kvqVBdumKJfFsD:qSX+G3+O83mpHhzZ7q6kvqvEBfq
TLSH
T15AE69E42F7825DF1D9C240B065BFB73B8A369928477482E397A51DC9E8392D1363B3C9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2365226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\ImageMagick\VisualMagick\bin\convert.pdb

ws2_32

getsockname WSASetLastError getservbyname getservbyport gethostbyname gethostbyaddr select ntohs inet_ntoa inet_addr htons htonl __WSAFDIsSet WSAAddressToStringA WSAStringToAddressA WSASetEvent WSAEventSelect ioctlsocket getsockopt WSAGetLastError WSACloseEvent WSACreateEvent freeaddrinfo getaddrinfo socket setsockopt send recv listen connect closesocket bind accept WSACleanup WSAEnumNetworkEvents WSAStartup

msvcr120

_libm_sse2_tan_precise _libm_sse2_log_precise _libm_sse2_exp_precise isdigit strstr _libm_sse2_sin_precise _libm_sse2_cos_precise isxdigit ldexp frexp div _libm_sse2_log10_precise _libm_sse2_sqrt_precise _setmode _commit setvbuf putc getc fwrite _ftelli64 _fseeki64 fread ferror feof _fdopen _wstat64 _wcsdup _waccess _wgetcwd _getcwd _wremove _free_locale _create_locale setlocale tolower toupper _strnicmp _stricmp _strtod_l _vsnprintf_l _vfprintf_l vfprintf _CIfmod _getpid _fstat64 _wfopen _fileno fclose _tzset __timezone __daylight _get_osfhandle wcsncat _j0 _j1 ungetc memchr _snprintf wcstombs strpbrk _beginthreadex _endthreadex _wputenv wcschr calloc localeconv strerror_s _chsize isalpha bsearch rand_s _mktime64 _pipe _open_osfhandle _wspawnv _wspawnve _wspawnvp _wspawnvpe _kbhit ___mb_cur_max_func _wstat32 _wchdir _wmkdir _wrmdir _wchmod _wcreat _wunlink _wfreopen _wutime64 fseek ftell remove atol _purecall ??2@YAPAXI@Z ??_V@YAXPAX@Z ??_U@YAPAXI@Z ??0exception@std@@QAE@ABV01@@Z _CxxThrowException __CxxFrameHandler3 __RTDynamicCast ??0exception@std@@QAE@XZ ??1exception@std@@UAE@XZ fgetpos fsetpos _lock_file _unlock_file memcpy_s ??0bad_cast@std@@QAE@PBD@Z ??0bad_cast@std@@QAE@ABV01@@Z ??1bad_cast@std@@UAE@XZ _isatty fgets _aligned_realloc _stat64i32 _wstat64i32 _beginthread _endthread strcpy_s strcat_s strncpy_s sprintf_s modf atof _strdup _HUGE rand _vsnprintf_s _vscprintf _wfullpath _dclass rewind fscanf strncat _lseek strrchr sscanf memset strcspn strncpy _hypot _CIatan2 printf _libm_sse2_asin_precise _libm_sse2_atan_precise islower _isnan _CIcosh _CIsinh _CItanh _libm_sse2_acos_precise fputs fprintf perror strftime isupper isalnum isgraph longjmp _setjmp3 fopen _unlink sprintf _stat64 fgetc _wrename _utime64 _XcptFilter _amsg_exit __wgetmainargs __set_app_type _cexit _configthreadlocale __setusermatherr _initterm_e _initterm __winitenv _fmode _commode _vsnprintf _except1 _crt_debugger_hook __crtUnhandledException __crtTerminateProcess ??3@YAXPAX@Z ??1type_info@@UAE@XZ ?terminate@@YAXXZ __crtSetUnhandledExceptionFilter _lock _unlock _calloc_crt __dllonexit _onexit _invoke_watson _controlfp_s _except_handler4_common _wfindfirst64i32 _findclose _wstat32i64 wcstoul iswctype wcsrchr atoi _write _aligned_malloc _aligned_free realloc malloc free signal qsort abort floor ceil _time64 strtoul strtol memcpy _libm_sse2_pow_precise _localtime64 _gmtime64 isprint isspace _wopen _lseeki64 _read _close strspn strncmp strchr memmove strtod getenv fputc strerror _exit exit _errno fflush __iob_func _wfindnext64i32 strcmp _wcsnicmp swscanf tmpnam strtok _open

vcomp120

_vcomp_leave_critsect _vcomp_set_num_threads omp_init_lock omp_set_lock omp_unset_lock _vcomp_for_dynamic_init _vcomp_flush _vcomp_fork _vcomp_for_static_init omp_destroy_lock omp_get_max_threads omp_get_thread_num _vcomp_master_begin _vcomp_for_dynamic_next _vcomp_barrier _vcomp_single_begin _vcomp_for_static_end _vcomp_enter_critsect _vcomp_master_end _vcomp_for_static_simple_init omp_set_nested omp_set_num_threads _vcomp_single_end

gdiplus

GdipAlloc GdipFree GdiplusStartup GdipDrawImageRectI GdipGraphicsClear GdipSetInterpolationMode GdipSetTextRenderingHint GdipSetSmoothingMode GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipGetImageVerticalResolution GdipGetImageHorizontalResolution GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdipLoadImageFromFileICM GdipLoadImageFromFile GdiplusShutdown

urlmon

URLDownloadToFileA

kernel32

LoadLibraryW DeleteFileW CreateFileW GetTempFileNameW GetTempPathW ExitProcess CreateMutexA ReleaseMutex GetCurrentThread CreateSemaphoreA ReleaseSemaphore DebugBreak TlsFree MoveFileExW WaitForMultipleObjectsEx SleepEx GetDateFormatW GetTimeFormatW GetLocaleInfoW GetTimeZoneInformation ReadConsoleInputA PeekConsoleInputA WriteFile InterlockedIncrement InterlockedDecrement InterlockedExchangeAdd InterlockedCompareExchange InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection SetEvent TlsAlloc TlsGetValue TlsSetValue CreateEventA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentVariableW DecodePointer GetCurrentProcessId IsProcessorFeaturePresent IsDebuggerPresent EncodePointer SetEnvironmentVariableA CreateThread QueryPerformanceCounter GetLogicalDrives GlobalFree GlobalUnlock GlobalLock GlobalAlloc Sleep OutputDebugStringA GetCurrentThreadId SetConsoleCtrlHandler WideCharToMultiByte GetVersionExA FindNextFileW FindFirstFileW FindResourceA GetStartupInfoA CreateProcessA GetModuleHandleA GetModuleFileNameW GetModuleFileNameA LoadLibraryExW CreateFileMappingA UnmapViewOfFile FlushViewOfFile MapViewOfFile PeekNamedPipe CreatePipe FormatMessageA SystemTimeToFileTime GetSystemInfo GetSystemTimeAsFileTime GetSystemTime SetHandleInformation CloseHandle FindClose SetFilePointer SetEndOfFile ReadFile SizeofResource LoadResource WaitForSingleObject SetErrorMode GetLastError SetUnhandledExceptionFilter GetExitCodeProcess CreateToolhelp32Snapshot Module32First SetEnvironmentVariableW ExpandEnvironmentStringsW VirtualQuery GetSystemDirectoryW GetWindowsDirectoryW GetComputerNameA GetProcessAffinityMask GetTickCount VerSetConditionMask GetVersion FormatMessageW GetModuleHandleW GetCommandLineW VerifyVersionInfoW GetLocaleInfoA GetThreadLocale LoadLibraryA GetSystemDirectoryA IsValidCodePage GetACP GetCPInfoExA IsDBCSLeadByteEx GetCurrentDirectoryW GetFileAttributesW DuplicateHandle GetConsoleWindow GetDriveTypeW GetDiskFreeSpaceExW GetVolumeInformationW GetVolumePathNameW GetModuleHandleExA InterlockedExchange GetDriveTypeA ReadDirectoryChangesW GetFileAttributesExW GetLongPathNameW WaitForMultipleObjects ExitThread Module32Next GetShortPathNameW MultiByteToWideChar FreeResource LockResource FreeLibrary GetProcAddress GlobalMemoryStatus LocalFree GetProcessTimes GetCurrentProcess TerminateProcess ResetEvent

user32

GetClipboardData EmptyClipboard CloseClipboard ReleaseDC EnumDisplayDevicesA OpenClipboard MessageBoxA LoadStringW GetDC SetClipboardData PeekMessageA PostMessageA IsWindow MsgWaitForMultipleObjectsEx SystemParametersInfoA FillRect

gdi32

Polyline CreateFontIndirectA EnumFontFamiliesExW CreateSolidBrush GdiFlush CreateCompatibleBitmap ExtTextOutW GetObjectW ModifyWorldTransform SetWorldTransform GetTextMetricsA SetTextAlign SetTextColor SetMapMode CreateBitmapIndirect BitBlt Rectangle DeleteDC DeleteObject RealizePalette ExtCreateRegion SelectPalette CreateDIBSection GetObjectA CreateDCA GetDeviceCaps GetWorldTransform ExtSelectClipRgn SelectClipRgn IntersectClipRect GetGraphicsMode GetClipRgn GetClipBox GetGlyphOutlineA CreateCompatibleDC StretchDIBits CreateRectRgn SelectObject SetGraphicsMode SetBkMode SaveDC RestoreDC GetGlyphIndicesW CreateFontIndirectW GetCharWidth32A GetFontData GetGlyphOutlineW GetOutlineTextMetricsA GetFontUnicodeRanges

advapi32

RegEnumKeyExW RegOpenKeyExW RegQueryValueExW RegEnumValueW CryptGenRandom CryptReleaseContext CryptAcquireContextA RegQueryInfoKeyW GetSecurityDescriptorOwner GetSecurityDescriptorGroup GetFileSecurityW LookupAccountSidW RegCreateKeyExA RegDeleteValueA RegEnumKeyExA RegNotifyChangeKeyValue RegSetValueExA RegQueryValueExA RegOpenKeyExA RegEnumKeyA RegCloseKey ReportEventA RegisterEventSourceA DeregisterEventSource RegEnumValueA GetUserNameW

oleaut32

SafeArrayAccessData SafeArrayGetLBound SafeArrayGetUBound SafeArrayRedim SafeArrayUnaccessData

usp10

ScriptShape ScriptItemize ScriptIsComplex ScriptPlace

winmm

timeGetTime

msvcp120

?_Xbad_function_call@std@@YAXXZ ?_Orphan_all@_Container_base0@std@@QAEXXZ ?id@?$codecvt@DDH@std@@2V0locale@2@A ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z ?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z ?always_noconv@codecvt_base@std@@QBE_NXZ ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ??Bid@locale@std@@QAEIXZ ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z ??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@ ??_7ios_base@std@@6B@ ?_BADOFF@std@@3_JB ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z ?uncaught_exception@std@@YA_NXZ ??0id@locale@std@@QAE@I@Z ?_Winerror_map@std@@YAPBDH@Z ?_Syserror_map@std@@YAPBDH@Z ?_Xout_of_range@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z ?_Xbad_alloc@std@@YAXXZ

shell32

SHFileOperationW CommandLineToArgvW SHGetSpecialFolderLocation SHGetPathFromIDListW SHGetFileInfoW

ole32

CoTaskMemFree

dnsapi

DnsFree DnsQuery_A

__oldXMLWDcompatibility __xmlBufferAllocScheme __xmlDefaultBufferSize __xmlDefaultSAXHandler __xmlDefaultSAXLocator __xmlDeregisterNodeDefaultValue __xmlDoValidityCheckingDefaultValue __xmlErrEncoding __xmlGenericError __xmlGenericErrorContext __xmlGetWarningsDefaultValue __xmlIndentTreeOutput __xmlKeepBlanksDefaultValue __xmlLastError __xmlLineNumbersDefaultValue __xmlLoadExtDtdDefaultValue __xmlOutputBufferCreateFilenameValue __xmlParserDebugEntities __xmlParserInputBufferCreateFilenameValue __xmlParserVersion __xmlPedanticParserDefaultValue __xmlRaiseError __xmlRegisterNodeDefaultValue __xmlSaveNoEmptyTags __xmlSimpleError __xmlStructuredError __xmlStructuredErrorContext __xmlSubstituteEntitiesDefaultValue __xmlTreeIndentString initGenericErrorDefaultFunc inputPop inputPush isolat1ToUTF8 namePop namePush nodePop nodePush xmlAddAttributeDecl xmlAddChild xmlAddChildList xmlAddDocEntity xmlAddDtdEntity xmlAddElementDecl xmlAddEncodingAlias xmlAddID xmlAddNextSibling xmlAddNotationDecl xmlAddRef xmlAddSibling xmlAllocParserInputBuffer xmlBufContent xmlBufEnd xmlBufGetNodeContent xmlBufShrink xmlBufUse xmlBufferAdd xmlBufferAddHead xmlBufferCCat xmlBufferCat xmlBufferContent xmlBufferCreate xmlBufferCreateSize xmlBufferCreateStatic xmlBufferDetach xmlBufferDump xmlBufferEmpty xmlBufferFree xmlBufferGrow xmlBufferLength xmlBufferResize xmlBufferSetAllocationScheme xmlBufferShrink xmlBufferWriteCHAR xmlBufferWriteChar xmlBufferWriteQuotedString xmlBuildQName xmlBuildRelativeURI xmlBuildURI xmlByteConsumed xmlCanonicPath xmlCharEncCloseFunc xmlCharEncFirstLine xmlCharEncInFunc xmlCharEncOutFunc xmlCharInRange xmlCharStrdup xmlCharStrndup xmlCheckFilename xmlCheckHTTPInput xmlCheckLanguageID xmlCheckUTF8 xmlCheckVersion xmlCleanupCharEncodingHandlers xmlCleanupEncodingAliases xmlCleanupGlobals xmlCleanupInputCallbacks xmlCleanupMemory xmlCleanupParser xmlCleanupThreads xmlClearNodeInfoSeq xmlClearParserCtxt xmlCopyChar xmlCopyCharMultiByte xmlCopyDocElementContent xmlCopyElementContent xmlCopyError xmlCopyNamespace xmlCopyNamespaceList xmlCopyNode xmlCopyNodeList xmlCopyProp xmlCopyPropList xmlCreateDocParserCtxt xmlCreateEntitiesTable xmlCreateEntityParserCtxt xmlCreateEnumeration xmlCreateFileParserCtxt xmlCreateIOParserCtxt xmlCreateIntSubset xmlCreateMemoryParserCtxt xmlCreatePushParserCtxt xmlCreateURI xmlCreateURLParserCtxt xmlCtxtGetLastError xmlCtxtReadDoc xmlCtxtReadFd xmlCtxtReadFile xmlCtxtReadIO xmlCtxtReadMemory xmlCtxtReset xmlCtxtResetLastError xmlCtxtResetPush xmlCtxtUseOptions xmlCurrentChar xmlDOMWrapAdoptNode xmlDOMWrapCloneNode xmlDOMWrapFreeCtxt xmlDOMWrapNewCtxt xmlDOMWrapReconcileNamespaces xmlDOMWrapRemoveNode xmlDefaultSAXHandlerInit xmlDelEncodingAlias xmlDeregisterNodeDefault xmlDetectCharEncoding xmlDictCleanup xmlDictCreate xmlDictCreateSub xmlDictExists xmlDictFree xmlDictGetUsage xmlDictLookup xmlDictOwns xmlDictQLookup xmlDictReference xmlDictSetLimit xmlDictSize xmlDocCopyNode xmlDocCopyNodeList xmlDocGetRootElement xmlEncodeEntitiesReentrant xmlEncodeSpecialChars xmlErrMemory xmlEscapeFormatString xmlFileClose xmlFileMatch xmlFileOpen xmlFileRead xmlFindCharEncodingHandler xmlFree xmlFreeAttributeTable xmlFreeDoc xmlFreeDocElementContent xmlFreeDtd xmlFreeElementContent xmlFreeElementTable xmlFreeEntitiesTable xmlFreeEnumeration xmlFreeIDTable xmlFreeInputStream xmlFreeMutex xmlFreeNode xmlFreeNodeList xmlFreeNotationTable xmlFreeNs xmlFreeNsList xmlFreeParserCtxt xmlFreeParserInputBuffer xmlFreeProp xmlFreePropList xmlFreeRMutex xmlFreeRefTable xmlFreeURI xmlGcMemGet xmlGcMemSetup xmlGetBufferAllocationScheme xmlGetCharEncodingHandler xmlGetCharEncodingName xmlGetCompressMode xmlGetDocCompressMode xmlGetDocEntity xmlGetDtdAttrDesc xmlGetDtdElementDesc xmlGetDtdEntity xmlGetDtdNotationDesc xmlGetDtdQAttrDesc xmlGetDtdQElementDesc xmlGetEncodingAlias xmlGetExternalEntityLoader xmlGetGlobalState xmlGetID xmlGetIntSubset xmlGetLastChild xmlGetLastError xmlGetLineNo xmlGetNoNsProp xmlGetNsProp xmlGetParameterEntity xmlGetPredefinedEntity xmlGetProp xmlGetRefs xmlGetThreadId xmlGetUTF8Char xmlHasFeature xmlHasNsProp xmlHasProp xmlHashAddEntry xmlHashAddEntry2 xmlHashAddEntry3 xmlHashCopy xmlHashCreate xmlHashCreateDict xmlHashFree xmlHashLookup xmlHashLookup2 xmlHashLookup3 xmlHashQLookup xmlHashQLookup2 xmlHashQLookup3 xmlHashRemoveEntry xmlHashRemoveEntry2 xmlHashRemoveEntry3 xmlHashScan xmlHashScan3 xmlHashScanFull xmlHashScanFull3 xmlHashSize xmlHashUpdateEntry xmlHashUpdateEntry2 xmlHashUpdateEntry3 xmlIOFTPClose xmlIOFTPMatch xmlIOFTPOpen xmlIOFTPRead xmlIOHTTPClose xmlIOHTTPMatch xmlIOHTTPOpen xmlIOHTTPRead xmlInitCharEncodingHandlers xmlInitGlobals xmlInitMemory xmlInitNodeInfoSeq xmlInitParser xmlInitParserCtxt xmlInitThreads xmlInitializeDict xmlInitializeGlobalState xmlIsBaseChar xmlIsBaseCharGroup xmlIsBlank xmlIsBlankNode xmlIsChar xmlIsCharGroup xmlIsCombining xmlIsCombiningGroup xmlIsDigit xmlIsDigitGroup xmlIsExtender xmlIsExtenderGroup xmlIsID xmlIsIdeographic xmlIsIdeographicGroup xmlIsLetter xmlIsMainThread xmlIsMixedElement xmlIsPubidChar xmlIsPubidChar_tab xmlIsRef xmlKeepBlanksDefault xmlLineNumbersDefault xmlLinkGetData xmlListAppend xmlListClear xmlListCopy xmlListCreate xmlListDelete xmlListDup xmlListEmpty xmlListEnd xmlListFront xmlListInsert xmlListMerge xmlListPopBack xmlListPopFront xmlListPushBack xmlListPushFront xmlListRemoveAll xmlListRemoveFirst xmlListRemoveLast xmlListReverse xmlListReverseSearch xmlListReverseWalk xmlListSearch xmlListSize xmlListSort xmlListWalk xmlLoadExternalEntity xmlLockLibrary xmlMalloc xmlMallocAtomic xmlMallocAtomicLoc xmlMallocLoc xmlMemBlocks xmlMemDisplay xmlMemDisplayLast xmlMemFree xmlMemGet xmlMemMalloc xmlMemRealloc xmlMemSetup xmlMemShow xmlMemStrdup xmlMemStrdupLoc xmlMemUsed xmlMemoryDump xmlMemoryStrdup xmlMutexLock xmlMutexUnlock xmlNanoFTPCheckResponse xmlNanoFTPCleanup xmlNanoFTPClose xmlNanoFTPCloseConnection xmlNanoFTPConnect xmlNanoFTPConnectTo xmlNanoFTPCwd xmlNanoFTPDele xmlNanoFTPFreeCtxt xmlNanoFTPGet xmlNanoFTPGetConnection xmlNanoFTPGetResponse xmlNanoFTPGetSocket xmlNanoFTPInit xmlNanoFTPList xmlNanoFTPNewCtxt xmlNanoFTPOpen xmlNanoFTPProxy xmlNanoFTPQuit xmlNanoFTPRead xmlNanoFTPScanProxy xmlNanoFTPUpdateURL xmlNanoHTTPAuthHeader xmlNanoHTTPCleanup xmlNanoHTTPClose xmlNanoHTTPContentLength xmlNanoHTTPEncoding xmlNanoHTTPFetch xmlNanoHTTPInit xmlNanoHTTPMethod xmlNanoHTTPMethodRedir xmlNanoHTTPMimeType xmlNanoHTTPOpen xmlNanoHTTPOpenRedir xmlNanoHTTPRead xmlNanoHTTPRedir xmlNanoHTTPReturnCode xmlNanoHTTPScanProxy xmlNewCDataBlock xmlNewCharEncodingHandler xmlNewCharRef xmlNewComment xmlNewDoc xmlNewDocComment xmlNewDocElementContent xmlNewDocNode xmlNewDocNodeEatName xmlNewDocPI xmlNewDocProp xmlNewDocText xmlNewDocTextLen xmlNewDtd xmlNewElementContent xmlNewEntity xmlNewEntityInputStream xmlNewIOInputStream xmlNewInputFromFile xmlNewInputStream xmlNewMutex xmlNewNode xmlNewNodeEatName xmlNewNs xmlNewNsProp xmlNewNsPropEatName xmlNewPI xmlNewParserCtxt xmlNewRMutex xmlNewReference xmlNewStringInputStream xmlNewText xmlNewTextLen xmlNextChar xmlNoNetExternalEntityLoader xmlNodeAddContent xmlNodeAddContentLen xmlNodeBufGetContent xmlNodeGetBase xmlNodeGetContent xmlNodeGetLang xmlNodeGetSpacePreserve xmlNodeIsText xmlNodeListGetString xmlNodeSetContent xmlNormalizeURIPath xmlNormalizeWindowsPath xmlOutputBufferCreateFilenameDefault xmlParseAttValue xmlParseAttribute xmlParseAttributeListDecl xmlParseAttributeType xmlParseBalancedChunkMemory xmlParseBalancedChunkMemoryRecover xmlParseCDSect xmlParseCharData xmlParseCharEncoding xmlParseCharRef xmlParseChunk xmlParseComment xmlParseContent xmlParseCtxtExternalEntity xmlParseDefaultDecl xmlParseDoc xmlParseDocTypeDecl xmlParseDocument xmlParseElement xmlParseElementChildrenContentDecl xmlParseElementContentDecl xmlParseElementDecl xmlParseElementMixedContentDecl xmlParseEncName xmlParseEncodingDecl xmlParseEndTag xmlParseEntity xmlParseEntityDecl xmlParseEntityRef xmlParseEntityValue xmlParseEnumeratedType xmlParseEnumerationType xmlParseExtParsedEnt xmlParseExternalEntity xmlParseExternalID xmlParseExternalSubset xmlParseFile xmlParseInNodeContext xmlParseMarkupDecl xmlParseMemory xmlParseMisc xmlParseName xmlParseNmtoken xmlParseNotationDecl xmlParseNotationType xmlParsePEReference xmlParsePI xmlParsePITarget xmlParsePubidLiteral xmlParseReference xmlParseSDDecl xmlParseStartTag xmlParseSystemLiteral xmlParseTextDecl xmlParseURI xmlParseURIRaw xmlParseURIReference xmlParseVersionInfo xmlParseVersionNum xmlParseXMLDecl xmlParserAddNodeInfo xmlParserError xmlParserFindNodeInfo xmlParserFindNodeInfoIndex xmlParserGetDirectory xmlParserHandlePEReference xmlParserInputBufferCreateFd xmlParserInputBufferCreateFile xmlParserInputBufferCreateFilename xmlParserInputBufferCreateFilenameDefault xmlParserInputBufferCreateIO xmlParserInputBufferCreateMem xmlParserInputBufferCreateStatic xmlParserInputBufferGrow xmlParserInputBufferPush xmlParserInputBufferRead xmlParserInputGrow xmlParserInputRead xmlParserInputShrink xmlParserMaxDepth xmlParserPrintFileContext xmlParserPrintFileInfo xmlParserValidityError xmlParserValidityWarning xmlParserWarning xmlPathToURI xmlPedanticParserDefault xmlPopInput xmlPopInputCallbacks xmlPrintURI xmlPushInput xmlRMutexLock xmlRMutexUnlock xmlReadDoc xmlReadFd xmlReadFile xmlReadIO xmlReadMemory xmlRealloc xmlReallocLoc xmlRecoverDoc xmlRecoverFile xmlRecoverMemory xmlRegisterCharEncodingHandler xmlRegisterDefaultInputCallbacks xmlRegisterInputCallbacks xmlRegisterNodeDefault xmlRemoveID xmlRemoveProp xmlRemoveRef xmlResetError xmlResetLastError xmlSAX2AttributeDecl xmlSAX2CDataBlock xmlSAX2Characters xmlSAX2Comment xmlSAX2ElementDecl xmlSAX2EndDocument xmlSAX2EndElement xmlSAX2EndElementNs xmlSAX2EntityDecl xmlSAX2ExternalSubset xmlSAX2GetColumnNumber xmlSAX2GetEntity xmlSAX2GetLineNumber xmlSAX2GetParameterEntity xmlSAX2GetPublicId xmlSAX2GetSystemId xmlSAX2HasExternalSubset xmlSAX2HasInternalSubset xmlSAX2IgnorableWhitespace xmlSAX2InitDefaultSAXHandler xmlSAX2InternalSubset xmlSAX2IsStandalone xmlSAX2NotationDecl xmlSAX2ProcessingInstruction xmlSAX2Reference xmlSAX2ResolveEntity xmlSAX2SetDocumentLocator xmlSAX2StartDocument xmlSAX2StartElement xmlSAX2StartElementNs xmlSAX2UnparsedEntityDecl xmlSAXDefaultVersion xmlSAXParseDoc xmlSAXParseEntity xmlSAXParseFile xmlSAXParseFileWithData xmlSAXParseMemory xmlSAXParseMemoryWithData xmlSAXUserParseFile xmlSAXUserParseMemory xmlSAXVersion xmlSaveUri xmlSearchNs xmlSearchNsByHref xmlSetBufferAllocationScheme xmlSetCompressMode xmlSetDocCompressMode xmlSetExternalEntityLoader xmlSetGenericErrorFunc xmlSetListDoc xmlSetNs xmlSetStructuredErrorFunc xmlSetTreeDoc xmlSetupParserForBuffer xmlSkipBlankChars xmlSnprintfElementContent xmlSplitQName xmlSplitQName2 xmlSplitQName3 xmlStopParser xmlStrEqual xmlStrPrintf xmlStrQEqual xmlStrVPrintf xmlStrcasecmp xmlStrcasestr xmlStrcat xmlStrchr xmlStrcmp xmlStrdup xmlStringComment xmlStringCurrentChar xmlStringDecodeEntities xmlStringGetNodeList xmlStringLenDecodeEntities xmlStringLenGetNodeList xmlStringText xmlStringTextNoenc xmlStrlen xmlStrncasecmp xmlStrncat xmlStrncatNew xmlStrncmp xmlStrndup xmlStrstr xmlStrsub xmlSubstituteEntitiesDefault xmlSwitchEncoding xmlSwitchInputEncoding xmlSwitchToEncoding xmlTextConcat xmlTextMerge xmlThrDefBufferAllocScheme xmlThrDefDefaultBufferSize xmlThrDefDeregisterNodeDefault xmlThrDefDoValidityCheckingDefaultValue xmlThrDefGetWarningsDefaultValue xmlThrDefIndentTreeOutput xmlThrDefKeepBlanksDefaultValue xmlThrDefLineNumbersDefaultValue xmlThrDefLoadExtDtdDefaultValue xmlThrDefOutputBufferCreateFilenameDefault xmlThrDefParserDebugEntities xmlThrDefParserInputBufferCreateFilenameDefault xmlThrDefPedanticParserDefaultValue xmlThrDefRegisterNodeDefault xmlThrDefSaveNoEmptyTags xmlThrDefSetGenericErrorFunc xmlThrDefSetStructuredErrorFunc xmlThrDefSubstituteEntitiesDefaultValue xmlThrDefTreeIndentString xmlURIEscape xmlURIEscapeStr xmlURIUnescapeString xmlUTF8Charcmp xmlUTF8Size xmlUTF8Strlen xmlUTF8Strloc xmlUTF8Strndup xmlUTF8Strpos xmlUTF8Strsize xmlUTF8Strsub xmlUnlinkNode xmlUnlockLibrary xmlValidateNCName

Name

.text

Size

8.1MB

Virtual Size

8.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.2MB

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.3MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

888KB

Virtual Size

892KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

generic

count=2, id=221, version=20806,

count=1, id=223, version=20806,

count=4, id=221, productName=VS2013 build 21005, version=21005,

count=15, id=199, version=41118,

count=23, id=223, productName=VS2013 build 21005, version=21005,

count=20, id=224, productName=VS2013 build 21005, version=21005,

count=6, id=225, productName=VS2013 build 21005, version=21005,

count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=34, productName=Unmarked objects (old),

count=92, id=225, productName=VS2013 UPD5 build 40629, version=40629,

count=1, id=223, productName=VS2013 UPD5 build 40629, version=40629,

count=27, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=648, id=1, productName=Unmarked objects,

count=990, id=224, productName=VS2013 UPD5 build 40629, version=40629,

count=1, id=220, productName=VS2013 UPD5 build 40629, version=40629,

count=1, id=219, productName=VS2013 build 21005, version=21005,

count=1, id=151,

count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,